
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier: 3WKEof6zBRgyNP7nP9ZjCbWlERDlyXDjVU7LuN2mv2o=
Subject key identifier: 5C:93:AC:37:0F:D7:0B:D0:DB:F2:C5:A2:A8:AB:D2:EB:41:B6:66:3B
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number: 0882
Signing time: Sun 26 Jul 2026 22:00:10 +0000
Manifest this update: Sun 26 Jul 2026 22:00:09 +0000
Manifest next update: Sun 02 Aug 2026 22:00:09 +0000
Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: Cae9cxDIBRFeiqtWfm1qbchWczTJZVlj+XM58d9rMq8=)
2: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=)
3: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=)
4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=)
5: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Jul 26 22:00:09 2026 GMT
Not After : Aug 2 22:00:09 2026 GMT
Subject: CN=6a66836a-63fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:09:a1:19:87:67:9c:54:99:88:c2:f0:bc:
80:cd:a7:ec:87:a4:52:dd:21:48:13:a6:cb:39:e1:
e8:f4:46:ed:a7:0a:5a:71:bb:84:68:eb:67:ce:d1:
cb:a7:94:78:61:fe:5d:01:a2:9b:7c:d4:d0:96:74:
1b:80:9e:2f:ab:0f:45:9e:89:74:d1:99:c3:ad:62:
d9:c2:73:50:0f:97:60:aa:8d:12:8d:f2:f4:f5:57:
bf:27:38:7d:18:a8:fd:dd:33:92:10:88:db:6b:78:
cc:e2:b6:0a:59:31:ad:e7:a1:25:75:7c:bd:05:29:
e8:b4:22:c6:39:75:40:52:d4:8f:66:0d:63:3a:9d:
9e:3d:a8:4f:69:4a:0e:2b:be:2c:66:c7:f9:24:d5:
2e:4e:73:31:f2:af:37:ad:17:e1:88:50:c7:0d:6e:
9f:39:19:eb:a6:de:d7:84:f7:74:7e:07:c2:b3:93:
37:64:bf:78:30:39:49:4f:0e:85:9b:ff:98:e4:73:
4f:bf:74:5c:fa:e9:ac:0a:eb:c6:21:f9:66:03:03:
36:b5:5b:76:79:1b:f8:00:79:c5:ea:04:e3:91:14:
46:a2:1f:be:b6:e0:1f:01:fa:b2:b7:dc:9c:65:eb:
10:96:9b:84:92:8c:58:8b:10:3b:04:81:c2:54:ef:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:AC:37:0F:D7:0B:D0:DB:F2:C5:A2:A8:AB:D2:EB:41:B6:66:3B
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:f1:91:01:11:f7:62:13:93:c3:54:08:11:6f:5c:3f:99:
8e:fc:ab:db:6b:81:5f:50:0d:9e:cc:d0:2b:25:da:93:ab:6a:
f7:5c:ad:fd:10:31:95:a6:6c:d4:2a:e7:a1:c2:a1:1d:28:b6:
9e:63:d5:70:9c:7e:9f:ba:f9:2d:2e:be:56:4e:92:42:08:77:
45:fc:48:11:30:5d:09:f2:6b:98:88:fd:85:db:ec:ac:0e:4e:
23:cb:19:d9:84:55:fe:e5:cd:a6:11:b0:1b:b8:ed:2f:d7:4b:
b4:dc:dd:58:10:c3:a1:61:28:a7:fd:67:28:ba:31:a7:0d:e3:
fc:b4:42:da:66:db:2c:46:ac:7e:34:83:b2:08:fe:ee:90:03:
eb:47:80:ac:9a:2d:a5:0b:d2:3c:7a:bb:09:78:b0:5f:10:60:
62:87:76:55:e7:4e:d9:96:d5:9b:38:5d:63:4d:00:cf:64:d9:
e5:92:7e:cc:45:73:63:a3:ff:73:16:bd:cd:07:4f:66:0e:11:
51:6d:75:90:39:a8:c7:ac:64:46:04:fc:16:c5:20:2b:d9:01:
93:73:6b:53:e8:fe:d9:a6:1c:6f:4d:e7:c6:1c:3d:7b:b5:e8:
64:61:e1:0e:a1:d8:79:71:50:44:77:c5:4a:e0:f0:81:b6:4c:
b1:04:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:52 2026 by rpki-client